Anthropic’s auto-clicking AI Chrome extension raises browser-hijacking concerns (arstechnica.com)
from salarua@sopuli.xyz to technology@lemmy.world on 27 Aug 19:02
https://sopuli.xyz/post/32737411

Security researchers have concerns that Anthropic’s Claude for Chrome is vulnerable to malicious prompting. Claude for Chrome allows users to chat with Claude as they browse the web. Claude can read webpages, fill forms, and click on links and buttons to perform complex tasks for the user. But Anthropic’s testing revealed that 11.2% of malicious prompting attempts succeeded even with safety measures in place. One test case was a malicious email that asked Claude to delete all emails in the user’s inbox for “mailbox hygiene”. AI researcher Simon Willison states that an 11.2% success rate is unacceptable for so-called AI agents, especially when several AI companies are releasing their own browser extensions. One competing product, Perplexity’s Comet browser, was found to be vulnerable to a prompt injection attack that instructed it to start password recovery for the user’s Gmail account. Although Perplexity attempted to fix the issue, Comet remains vulnerable to this attack.

Archive link

#technology

threaded - newest

desmosthenes@lemmy.world on 27 Aug 19:39 next collapse

obviously lol

Imgonnatrythis@sh.itjust.works on 27 Aug 19:41 collapse

First, I can’t believe people are paying $100-200 / month for Ai crap. Second, if it were free or very cheap and I could sandbox it to only respond to painful cookie request menus to reject cookies, I would use it. I have consent o matic but it does a shit job and only works on a small percentage of sites.

morto@piefed.social on 27 Aug 22:25 next collapse

only respond to painful cookie request menus to reject cookies

You can do that just with ublock with the annoyance list, or using an extension like i don't care about cookies. Simple and efficient, no need for an "ai agent" for that

Imgonnatrythis@sh.itjust.works on 28 Aug 10:44 collapse

I don’t care about cookies seems to be for people that feel that way. It sounds like if it has any difficulty blocking cookies is just accepts the to kill the pop up. I do care about cookies. It’s my understanding unlock will just get rid of the pop-ups and allow cookies to default to accepted.

Both of these tools are detrimental imo as they just work against the protections that were attempted to be put in place by the EU to help minimize cookie abuse. Using these accomplishes Exactly what websites want. They have made pop ups and menus annoying enough that people are happy. To ignore them and allow them to default to aggressive tracking methods.

Blisterexe@lemmy.zip on 27 Aug 22:51 collapse

Consentaumatic does the cookie thing

Imgonnatrythis@sh.itjust.works on 28 Aug 10:46 collapse

On an extremely limited number of sites. It performs very poorly in real world use. Especially for academically oriented sites I’ve noticed.

Dynamo@lemmy.world on 29 Aug 05:29 collapse

You can report websites in the extension if it does not work.

It’s still better than just accepting everything in my opinion. I trust that the coverage of websites/cookie prompts in the extension will improve over time.

Imgonnatrythis@sh.itjust.works on 29 Aug 13:12 collapse

I have been using for a long time. Yes it definitely is better than accepting everything! . It’s a noble effort but it’'s quite limited. An AI tool focused on doing this at least in theory could likely perform better.